Overview

overview

10

Static

static

10

7dd1cd90af...76.exe

windows7-x64

10

7dd1cd90af...76.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7dd1cd90afcfeeaee59330f2d13dc63e109ba51cb569e3d8647bf256c5192176

  • Size

    287KB

  • MD5

    13ed1a92187e9c89e3c941b31161aa3c

  • SHA1

    1ea7ac0c7b6f1f24837cd08fb2978617529ffa5c

  • SHA256

    7dd1cd90afcfeeaee59330f2d13dc63e109ba51cb569e3d8647bf256c5192176

  • SHA512

    c91a733422f803fe42b3c3896b71be7e9460a7dbb04bc1619b6e8079cedaf554ee9885a4da575cbd051ac7e328819cb2e688e6a36361e89e774653350ac7b440

  • SSDEEP

    6144:TrD60o3Ui3rcIav7XC25sfMyw0qrU29vnapA75eHmNWotwA92ScPj:FoBLMmRE5PrjvnPbW+L92SGj

Score
10/10
hailcybergate

Malware Config

Extracted

Family

cybergate

Version

2.7 J/M SE

Botnet

hail

C2

hacker-hail.dns53.biz:288

Mutex

JoKeR/M@SK

Attributes
  • enable_keylogger

    true

  • enable_message_box

    false

  • ftp_directory

    ./logs/

  • ftp_interval

    30

  • injected_process

    TheWorld 3.exe

  • install_dir

    System

  • install_file

    win

  • install_flag

    true

  • keylogger_enable_ftp

    false

  • message_box_caption

    texto da mensagem

  • message_box_title

    título da mensagem

  • password

    12121212

  • regkey_hkcu

    HKCU

  • regkey_hklm

    HKLM

Signatures

Files

  • 7dd1cd90afcfeeaee59330f2d13dc63e109ba51cb569e3d8647bf256c5192176
    .exe windows x86


    Headers

    Sections